Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2704▼ 598 respecto a la semana anterior
Críticas / altas1288▼ 199 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)299▼ 211 respecto a la semana anterior
663 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Media (5.4) | 0.41% | — | Jfinalcms Project Jfinalcms | 8/12/2023 | 17/6/2026 | JFinalCMS v5.0.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the column management department. | |
| Modificada | Alta (8.8) | 0.39% | — | Jfinalcms Project Jfinalcms | 5/12/2023 | 17/6/2026 | JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via admin/nav/delete. | |
| Modificada | Alta (8.8) | 0.39% | — | Jfinalcms Project Jfinalcms | 5/12/2023 | 17/6/2026 | JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/nav/update. | |
| Modificada | Alta (8.8) | 0.39% | — | Jfinalcms Project Jfinalcms | 5/12/2023 | 17/6/2026 | JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/nav/save. | |
| Modificada | Alta (8.8) | 0.39% | — | Jfinalcms Project Jfinalcms | 5/12/2023 | 17/6/2026 | JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/category/delete. | |
| Modificada | Alta (8.8) | 0.39% | — | Jfinalcms Project Jfinalcms | 5/12/2023 | 17/6/2026 | JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/category/updateStatus. | |
| Modificada | Alta (8.8) | 0.39% | — | Jfinalcms Project Jfinalcms | 5/12/2023 | 17/6/2026 | JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/category/save. | |
| Modificada | Alta (8.8) | 0.39% | — | Jfinalcms Project Jfinalcms | 5/12/2023 | 17/6/2026 | JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/category/update. | |
| Modificada | Alta (8.8) | 0.39% | — | Jfinalcms Project Jfinalcms | 5/12/2023 | 17/6/2026 | JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/tag/save. | |
| Modificada | Alta (8.8) | 0.39% | — | Jfinalcms Project Jfinalcms | 5/12/2023 | 17/6/2026 | JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/div/delete. | |
| Modificada | Alta (8.8) | 0.39% | — | Jfinalcms Project Jfinalcms | 5/12/2023 | 17/6/2026 | JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/div/update. | |
| Modificada | Alta (8.8) | 0.39% | — | Jfinalcms Project Jfinalcms | 5/12/2023 | 17/6/2026 | JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/friend_link/delete. | |
| Modificada | Alta (8.8) | 0.40% | — | Jfinalcms Project Jfinalcms | 5/12/2023 | 17/6/2026 | JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /admin/friend_link/save. | |
| Modificada | Alta (8.8) | 0.39% | — | Jfinalcms Project Jfinalcms | 5/12/2023 | 17/6/2026 | JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/form/save. | |
| Modificada | Alta (8.8) | 0.39% | — | Jfinalcms Project Jfinalcms | 5/12/2023 | 17/6/2026 | JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/tag/update. | |
| Modificada | Alta (8.8) | 0.39% | — | Jfinalcms Project Jfinalcms | 5/12/2023 | 17/6/2026 | JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/tag/delete. | |
| Modificada | Alta (8.8) | 0.39% | — | Jfinalcms Project Jfinalcms | 5/12/2023 | 17/6/2026 | JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/friend_link/update. | |
| Modificada | Alta (8.8) | 0.39% | — | Jfinalcms Project Jfinalcms | 5/12/2023 | 17/6/2026 | JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/slide/update. | |
| Modificada | Alta (8.8) | 0.39% | — | Jfinalcms Project Jfinalcms | 5/12/2023 | 17/6/2026 | JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via /admin/slide/delete. | |
| Modificada | Alta (8.8) | 0.39% | — | Jfinalcms Project Jfinalcms | 5/12/2023 | 17/6/2026 | JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/slide/save. | |
| Modificada | Alta (7.2) | 0.79% | — | Company Website CMS Project Company Website CMS | 2/11/2023 | 17/6/2026 | A vulnerability was found in SourceCodester Company Website CMS 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /dashboard/createblog of the component Create Blog Page. The manipulation leads to unrestricted upload. The attack may be launched remotely. The exploit… | |
| Modificada | Crítica (9.8) | 0.52% | — | Hansuncms Project Hansuncms | 9/10/2023 | 17/6/2026 | hansun CMS v1.0 was discovered to contain a SQL injection vulnerability via the component /ajax/ajax_login.ashx. | |
| Modificada | Media (5.4) | 0.40% | — | Sscms Project Sscms | 3/10/2023 | 17/6/2026 | SSCMS 7.2.2 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Material Management component. | |
| Modificada | Media (5.4) | 0.40% | — | Sscms Project Sscms | 3/10/2023 | 17/6/2026 | SSCMS 7.2.2 was discovered to contain a cross-site scripting (XSS) vulnerability via the Column Management component. | |
| Modificada | Media (4.9) | 1.1% | — | Foru CMS Project Foru CMS | 29/9/2023 | 17/6/2026 | A vulnerability classified as problematic was found in ForU CMS. This vulnerability affects unknown code of the file /admin/cms_admin.php. The manipulation of the argument del leads to denial of service. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. This product is… |